CVE-2006-6846

CVE-2006-6846 covers multiple SQL injection vulnerabilities in the While You Were Out (WYWO) InOut Board 1.0. The flaws allow remote attackers to run arbitrary SQL commands through: (1) num parameter in phonemessage.asp, (2) catcode parameter in faqDsp.asp, and (3) Username and (4) Password field...